---
typeId: req
recordId: benac-auth-001
fields:
  title: Distinct authentication model
  statement: Benac shall distinguish identity, authentication, authorization, and
    trust in data models, API responses, user-facing reviews, and conformance
    tests.
  rationale: Multiple implementations must not treat login, signature
    verification, or peer authentication as automatic permission.
  verification: Inspect the system schema and run conformance tests proving that
    an authenticated principal remains unauthorized until local policy grants
    authority.
  testable: true
  status: draft
  area: BENAC-AUTH
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.2 Authentication and authority boundaries
  order: 16
---
